Cloudflare DevelopersCD
Cloudflare Developers•2y ago
quambo

Cloudflare Zero Trust on a VPS, Load Balancer, HTTPS

I'd like to set up 2 VPS with Hasura and cloudflared (via docker-compose), with all incoming traffic blocked, and a cloudflare load balancer listening to hasura.example.com, routing traffic to both VPS based on some rules. I'd like to have HTTPS working, without installing certs on hasura, so just let cloudflared handle it.

Is this something that would work in theory? I've tried different things (like hooking up caddy in between, as reverse proxy and a lot of different configs), but I just can't get it to work. Most of the time, I end up with ERR_SSL_VERSION_OR_CIPHER_MISMATCH when trying to access hasura.example.com.

Here is an example config using caddy (hope I don't even need caddy). With that config, I was at least able to connect the loadbalancer (to origin 100.90.0.5 on the virtual network).

  • SEE BELOW FOR EXAMPLE, POST WAS TOO LONG TO ADD IT HERE *
Something I'm currently experimenting with is, without caddy, using cloudflared config to point the hostname to hasura docker container, but I'm not sure which origin I can then let point the loadbalancer to.

tunnel: ...
credentials-file: ...
warp-routing:
    enabled: true

inngress: 
  - hostname: https://hasura.example.com/
    service: http://hasura:8080
  - service: http_status:404


Has anyone got an idea? Thanks!
Was this page helpful?